3 ms·
I worked with a guy at a startup who wrote and designed a Mac hacking system that exploited Firewire because it can read memory directly. Firewire is basically
by failwhaleshark 5y ago
I worked with a guy at a startup who wrote and designed a Mac hacking system that exploited Firewire because it can read memory directly. Firewire is basically a security nightmare like several other peripheral interfaces (Wikipedia says "PCI Express, PC Card, ExpressCard, FireWire [yeap], PCI, and PCI-X")
Thunderbolt 4 allegedly includes mitigations to prevent arbitrary DMA transactions and Thunderspy.
https://en.wikipedia.org/wiki/Thunderbolt_(interface)#Vulnerability_to_DMA_attacks https://en.wikipedia.org/wiki/Thunderbolt_(interface)#Vulner...
Btw, partial list of USB attacks:
https://www.bleepingcomputer.com/news/security/heres-a-list-of-29-different-types-of-usb-attacks/ https://www.bleepingcomputer.com/news/security/heres-a-list-...
https://www.sciencedirect.com/science/article/pii/S0167404817301578 https://www.sciencedirect.com/science/article/pii/S016740481...